CVE-2026-47235 SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...

CVE-2026-47235

The SimulationCraft tool (versions after release-820-01 and before the May 7, 2026 nightly) is vulnerable to a Heap-Based Buffer Overflow and Out-of-Bounds Write in the bcp_api.cpp file. The root cause is a loop over the JSON sockets array that fails to bound gem_idx by MAX_GEM_SLOTS (four). This...